What we collect, and why.

BreakBound arranges group trips and places the bookings with the travel providers who run them, such as cruise lines and hotels.

BreakBound is a registered fictitious name of Pinnacle Travel LLC, a Florida limited liability company, document number L23000537579. Pinnacle Travel LLC is the company responsible for the details described on this page, and is registered with the State of Florida as a seller of travel, registration number ST44780.

This page covers breakbound.org and the emails we send you about a booking. It does not cover the travel provider who ends up holding your booking, or the hotel websites we link out to. They each have their own privacy policies.

While you are just looking

Nothing you have to give us. The trip pages, the hotel pages and this one are open to anyone. We run no advertising trackers and no analytics. Our hosting provider keeps ordinary server logs, which include IP addresses, as part of running the site.

When you reserve a stateroom

For every guest in the room, because the cruise line requires them to issue a booking and to let that guest board:

• Title, first name, middle name, last name, suffix, gender, date of birth, citizenship and preferred language
• Email address, phone number, and postal address

For the room itself:

• The stateroom type, the package chosen, and any choice that came with it
• Whether each guest takes travel protection
• Whether the room is asking for an accessible stateroom, and when that request was affirmed
• The rep code you entered, so the booking is credited to the right campus rep

For the one card paying the room’s deposit: the card number, the expiry date, the security code, the name on the card, and the billing address. What happens to those is in Card details below.

When you look a booking up

Your email address and your BreakBound confirmation number. If you have lost the number, the email address you ask us to send it to, and nothing else.

When you write to us

Whatever is in your message, and the address you sent it from.

One person books the whole stateroom, so most reservations carry details about roommates as well as the person filling the form in.

If you are booking for other people, only submit their details with their agreement, and show them this page. Everything here applies to them exactly as it applies to you, and any of them can write to us about their own details.

BreakBound is a conduit, not a merchant. We do not charge your card. Our staff enter the booking, including the card details, into the travel provider’s own system, and the provider charges the card and holds the booking from then on. The provider is named on the trip’s own page and in the terms you agree to before you reserve.

Hotels are referral only. Every property on our hotel pages links out to that property’s own website and you book there. We collect nothing on those pages, and we pass nothing to the hotel.

We use a small number of suppliers to run the site. Each handles your details only in order to provide their service to us:

• Vercel, which hosts the website
• Supabase, which hosts the database reservations are stored in
• MailerSend, which sends the emails about your booking
• Google Workspace, which hosts the mailbox you reach us on

Some of those suppliers operate outside the United States. Wherever your details are handled, this page applies to them.

We do not sell your personal information, and we do not share it for advertising.

Nobody outside BreakBound and the suppliers above sees your details, unless we are required to hand something over by law.

Card details are the most sensitive thing on this site, so this is what actually happens to them.

• Your card is never charged by BreakBound. The travel provider charges it.
• The card number, expiry, security code and billing address are encrypted before they are stored, and are only ever decrypted on our server. They are never decrypted in your browser.
• Staff see them masked. Revealing a full value is a deliberate act, one field at a time, and every reveal is written to a log recording who did it and when. That log cannot be edited or deleted by anybody.
• We hold them until the final balance on your trip has been paid, because the same card pays it. After that we erase them from our records. What stays on the reservation is the name on the card and the last four digits, so staff can tell one booking’s card from another.
• Looking a booking up never returns card details of any kind, not even the last four, and no email we send carries them.
• There is no way to export any of this to a spreadsheet. That is on purpose.

We use no advertising cookies and no analytics cookies. There is nothing to consent to, which is why the site never asks you to.

• When you enter a campus rep’s code, a cookie remembers it so you do not have to type it again. It holds the code and nothing else, and it lasts 30 days.
• When you submit a reservation, your own browser keeps your confirmation number and the email address you typed, on that device only, so coming back to look the booking up is one press. It never holds card details or guest details. Clearing your browser data removes it.
• Staff signing in to the admin console get sign-in cookies. Those are never set for guests.

• Card details: we erase them once the final balance on your trip has been paid, or sooner if your booking is cancelled, since there is nothing left for the card to pay.
• Reservation records: kept while the trip is being run, and afterwards for as long as we need them for our accounts and to answer questions about a trip that has already happened.
• The record of who looked at what: kept permanently. It is the only thing that can account for access to card details, so it is deliberately not something anybody can tidy away.

Write to us and we will:

• tell you what we hold about you
• correct anything that is wrong
• delete what we hold, where we are not required to keep it

If your trip has not sailed yet, deleting your reservation means cancelling the booking, and the cancellation charges in the trip’s terms would apply. We will tell you that before doing anything.

Depending on where you live, your own state or country may give you further rights over your details. Write to us and we will act on them.

BreakBound trips are sold to adults, and reserving requires a campus rep’s code. This site is not directed at children and we do not knowingly collect details from a child directly. Where a guest under 18 is travelling, their details reach us from the adult booking the stateroom.

• Card details are encrypted before storage, and only ever decrypted on the server.
• Only named BreakBound staff can reach reservations. Each has their own sign-in and their own two-step code on their own phone, both required every time, and every action is recorded under their own name.
• Staff are signed out automatically after a short spell of inactivity, because these screens show personal details.
• The site itself reads nothing from the database directly. Every read runs on our server.

If something ever goes wrong with your details, we will tell you.

If we change what we collect or what we do with it, we will change this page and the date at the top of it. If the change is a significant one, we will notify you.

Questions about your details, or anything on this page, go to support@breakbound.org. A real person reads it.

If you already have a booking, quoting your BreakBound confirmation number gets you a faster answer. You can find it again on My Reservations.

By post: